Struct PermissionModelBuilder 

#[non_exhaustive]
pub struct PermissionModelBuilder { /* private fields */ }

A builder for PermissionModel.

Implementations

impl PermissionModelBuilder

pub fn type(self, input: PermissionModelType) -> Self

Defines how Resilience Hub scans your resources. It can scan for the resources by using a pre-existing role in your Amazon Web Services account, or by using the credentials of the current IAM user.

This field is required.

pub fn set_type(self, input: Option<PermissionModelType>) -> Self

Defines how Resilience Hub scans your resources. It can scan for the resources by using a pre-existing role in your Amazon Web Services account, or by using the credentials of the current IAM user.

pub fn get_type(&self) -> &Option<PermissionModelType>

Defines how Resilience Hub scans your resources. It can scan for the resources by using a pre-existing role in your Amazon Web Services account, or by using the credentials of the current IAM user.

pub fn invoker_role_name(self, input: impl Into<String>) -> Self

Existing Amazon Web Services IAM role name in the primary Amazon Web Services account that will be assumed by Resilience Hub Service Principle to obtain a read-only access to your application resources while running an assessment.

If your IAM role includes a path, you must include the path in the invokerRoleName parameter. For example, if your IAM role's ARN is arn:aws:iam:123456789012:role/my-path/role-name, you should pass my-path/role-name.

• You must have iam:passRole permission for this role while creating or updating the application.

• Currently, invokerRoleName accepts only \[A-Za-z0-9_+=,.@-\] characters.

pub fn set_invoker_role_name(self, input: Option<String>) -> Self

Existing Amazon Web Services IAM role name in the primary Amazon Web Services account that will be assumed by Resilience Hub Service Principle to obtain a read-only access to your application resources while running an assessment.

If your IAM role includes a path, you must include the path in the invokerRoleName parameter. For example, if your IAM role's ARN is arn:aws:iam:123456789012:role/my-path/role-name, you should pass my-path/role-name.

• You must have iam:passRole permission for this role while creating or updating the application.

• Currently, invokerRoleName accepts only \[A-Za-z0-9_+=,.@-\] characters.

pub fn get_invoker_role_name(&self) -> &Option<String>

Existing Amazon Web Services IAM role name in the primary Amazon Web Services account that will be assumed by Resilience Hub Service Principle to obtain a read-only access to your application resources while running an assessment.

If your IAM role includes a path, you must include the path in the invokerRoleName parameter. For example, if your IAM role's ARN is arn:aws:iam:123456789012:role/my-path/role-name, you should pass my-path/role-name.

• You must have iam:passRole permission for this role while creating or updating the application.

• Currently, invokerRoleName accepts only \[A-Za-z0-9_+=,.@-\] characters.

pub fn cross_account_role_arns(self, input: impl Into<String>) -> Self

Appends an item to cross_account_role_arns.

To override the contents of this collection use set_cross_account_role_arns.

Defines a list of role Amazon Resource Names (ARNs) to be used in other accounts. These ARNs are used for querying purposes while importing resources and assessing your application.

• These ARNs are required only when your resources are in other accounts and you have different role name in these accounts. Else, the invoker role name will be used in the other accounts.

• These roles must have a trust policy with iam:AssumeRole permission to the invoker role in the primary account.

pub fn set_cross_account_role_arns(self, input: Option<Vec<String>>) -> Self

Defines a list of role Amazon Resource Names (ARNs) to be used in other accounts. These ARNs are used for querying purposes while importing resources and assessing your application.

• These ARNs are required only when your resources are in other accounts and you have different role name in these accounts. Else, the invoker role name will be used in the other accounts.

• These roles must have a trust policy with iam:AssumeRole permission to the invoker role in the primary account.

pub fn get_cross_account_role_arns(&self) -> &Option<Vec<String>>

Defines a list of role Amazon Resource Names (ARNs) to be used in other accounts. These ARNs are used for querying purposes while importing resources and assessing your application.

• These ARNs are required only when your resources are in other accounts and you have different role name in these accounts. Else, the invoker role name will be used in the other accounts.

• These roles must have a trust policy with iam:AssumeRole permission to the invoker role in the primary account.

pub fn build(self) -> Result<PermissionModel, BuildError>

Consumes the builder and constructs a PermissionModel. This method will fail if any of the following fields are not set:

• r#type

Trait Implementations

impl Clone for PermissionModelBuilder

fn clone(&self) -> PermissionModelBuilder

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PermissionModelBuilder

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PermissionModelBuilder

fn default() -> PermissionModelBuilder

Returns the “default value” for a type.

impl PartialEq for PermissionModelBuilder

fn eq(&self, other: &PermissionModelBuilder) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for PermissionModelBuilder